The majority of commercial phishing simulators are offered as software-as-a-service (SaaS). So, if words like “missing dependencies” don’t sound like an alien tongue, then this category may be of interest to you. Additionally, most of them are Linux-based. But all the usual shortcomings are there as well: tools like this usually require some significant technical skills to install, configure, and run. With open-source, you get all the usual benefits, such as feature-rich free versions and community support. This is a growing and interesting category, which makes up the majority of our list.

Features like reporting or campaign management are often not an option, making them more like penetration testing tools than phishing simulators.

Simple tools that will allow you to craft a simple email message and send it to one or several recipients using a specified mail server.

Note: Want more than just a phishing simulator? Check out our article on the best security awareness training.īasically, if you are looking for a free phishing simulator for your company, you are down to three choices: create and send at least one phishing email to a real recipient. We wanted to focus on tools that allow you to actually run a phishing campaign on your own, i.e.

Nor are we including any of the free managed campaigns offered by so many now popular phishing services. The final list does not include any of the fishy (pardon the pun) apps that let you create a fake website or phishing site for collecting data. The title of this article was supposed to be “Top 9 Free Phishing Simulators.” However, after much searching, trying, visiting of broken links, filling out forms and signing up for mailing lists, it became clear that the combination of “free” and “top” really narrows down the selection to very few actual choices for phishing training.

Nine app email